Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44154D68C50811EF87B4D187762E951A.roa
File: 44154D68C50811EF87B4D187762E951A.roa (raw, json)
Hash identifier: 8HMKC2CI6HphEmgSKbYXXyr3eae+tCZcc6ZLHF4RynI=
Subject key identifier: 3E:1A:DC:80:E4:79:45:41:B9:D7:42:05:08:CE:EA:08:1F:D3:4C:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F197
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44154D68C50811EF87B4D187762E951A.roa
Signing time: Sat 28 Dec 2024 10:41:16 +0000
ROA not before: Sat 28 Dec 2024 10:41:13 +0000
ROA not after: Mon 20 Jan 2025 10:41:13 +0000
asID: 213725
IP address blocks: 156.253.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61847 (0xf197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 28 10:41:13 2024 GMT
Not After : Jan 20 10:41:13 2025 GMT
Subject: CN=676fd5cc-39b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:ec:76:25:1e:76:29:ed:cb:68:96:80:49:
88:1f:6a:c0:5b:39:84:d3:17:86:68:d7:cf:96:7b:
44:99:26:06:10:2f:7f:cc:a0:51:72:52:18:62:96:
9c:f3:99:4e:50:a6:5f:2f:1e:8d:14:62:a0:29:43:
6b:30:20:54:e0:1f:00:f2:ca:a8:92:13:0e:0b:3f:
98:c2:33:a8:60:2d:69:5e:3f:32:bc:62:23:15:bf:
01:13:49:ae:21:1e:d8:24:e9:cb:b3:bc:7b:bd:7a:
4f:9a:92:74:13:f6:6e:86:3c:00:24:a9:bf:2f:a9:
3c:2f:fd:27:31:0c:27:ba:e8:bc:07:09:0f:b3:c4:
4e:28:63:f6:3d:41:90:cb:7e:3b:ad:6b:62:8a:a2:
70:74:a9:ba:ae:57:23:07:c2:ca:37:87:a7:a7:ca:
87:0f:11:06:1e:be:d9:34:e3:8d:48:25:59:ef:bf:
5e:67:30:7d:a2:ee:0d:13:8e:8d:af:41:da:0d:4f:
25:42:61:da:c5:84:90:ca:87:55:5e:1f:36:91:7a:
18:de:d2:67:93:fb:0c:fb:76:b7:68:27:4c:45:b2:
f6:ff:a5:c5:b2:d8:3b:b5:9f:13:c4:13:f3:d8:ca:
bc:9e:08:5a:52:4c:97:7a:16:dd:4d:8d:59:c3:95:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:DC:80:E4:79:45:41:B9:D7:42:05:08:CE:EA:08:1F:D3:4C:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44154D68C50811EF87B4D187762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5c:49:cb:69:d3:49:1c:cd:6b:9e:56:f1:6a:ee:9b:a3:be:
bc:27:b6:f9:e8:73:99:30:0d:eb:8c:69:60:5d:41:fe:b0:ae:
5d:0b:a0:d2:d7:8d:d8:b0:ea:9a:c5:61:36:0f:15:66:d5:4c:
b9:46:a9:b4:7d:44:20:d3:1e:50:93:e5:ad:f9:93:55:1b:8d:
fe:40:73:e3:67:7b:09:e5:8f:b1:2b:3e:4a:c1:8f:e0:00:3c:
dd:c7:8a:11:d7:f4:f7:13:ba:52:37:e8:eb:e1:97:25:a8:eb:
7b:fd:a9:fc:4a:e8:60:01:fd:49:a2:11:5e:da:66:f9:cf:f1:
e9:91:75:01:38:f5:e3:5c:97:eb:45:b4:fb:19:7d:04:b9:33:
55:a5:b1:b3:5b:d2:32:dd:69:14:83:b4:67:0a:d2:29:9a:8c:
18:b9:95:25:f9:0d:37:f7:c2:54:1f:50:84:f6:f4:8b:8e:6d:
03:68:18:c1:01:ea:4c:4a:0d:3f:38:c2:c6:d9:5a:84:10:d6:
0c:12:ba:7a:be:eb:c7:a4:2f:1f:4b:95:9e:3c:2e:70:80:9c:
27:2b:4d:92:1f:35:68:ab:78:9e:49:2b:62:5a:76:f4:74:c0:
fb:7c:17:98:5c:86:fe:20:65:39:fa:89:97:eb:4b:23:27:f4:
c3:48:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:16 2025 by rpki-client